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Abstract 

Let ¥q be the finite field of characteristic p containing q = 
elements and f{x) = ax"' + x"^ a binomial with coefficients in this 
field. If some conditions on the gcd of n — m an g — 1 are satisfied then 
this polynomial does not permute the elements of the field. We prove 
in particular that if f{x) = ax" + permutes Fp, where n > m > 
and a € Fp*, then p — I < {d — l)d, where d = gcd(n — m,p — 1), and 
that this bound of p in term of d only, is sharp. We show as well how 
to obtain in certain cases a permutation binomial over a subfield of ¥q 
from a permutation binomial over Fg. 
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1 Introduction 

Let ¥q be the finite field of characteristic p containing q = elements. A 
polynomial f{x) G Fg is called a permutation polynomial of Fg if the induced 
map / : Fg — > Fg is one to one. The study of permutation polynomials 
goes back to Hermite |3| for Fp and Dickson [1] for Fg. The interest on 
permutation polynomials increased in part because of their application in 
cryptography and coding theory. Despite the interest of numerous people on 
the subject, characterizing permutation polynomials and finding new fami- 
lies of permutation polynomials remain open questions. Carlitz conjectured 
that given an even positive integer n there exists a constant C{n) such that 
for q > C{n), then there are no permutation polynomials of degree n over 
Fg. Fried, Guralnick and Saxl |2] proved Carlitz's conjecture. Permutation 
monomials are completely understood, however permutation binomials are 
not well understood. Niederreiter and Robinsom [6] proved the following 
theorem. 

Theorem 1. Given a positive integer n, there is a constant C{n) such that 
for q > C{n), no polynomial of the form ax" + bx"^ + c G Fg[a;], with n > 
m > 1, gcd(n, m) = 1, and ah ^ 0, permutes Fg. 

The constant C{n) in Theorem 1 is not explicit. Turnwald [9] improved 
Theorem 1 and proved the following. 

Theorem 2. If f{x) = ax^+x"^ permutes Fg, where n > m > and a G Fg*, 
then either q < {n — 2)^ + An — A or n = mp^. 

Turnwald's proof uses Weil's lower bound [11] for the number of the points 
on the curve {f{x) — f{y)/{x — y) over Fg. For q a prime number, Turnwald 
[9] proved the following. 

Theorem 3. If f{x) = ax" + x™ permutes Fp, where n > m > and a G Fp*, 
then p < nmax{m, n — m) . 

For m = 1, Wan [1^ proved the following. 
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Theorem 4. If f{x) = ax" + x permutes ¥p, where n > 1 and a G F^*, then 
p — 1 < {n — 1) ■ gcd{n — l,p — 1). 

The bounds in Theorem 3 and Theorem 4 are of different nature. The 
bound in Theorem 3 is given in term of max(m, n — m), whereas the bound 
in Theorem 4 is given in term of gcd(n — l,p—l). Theorem 3 and Theorem 
4 have been improved ([5]) as follow. 

Theorem 5. If f{x) = ax"+x"^ permutes ¥p, where n > m > and a G ¥p* , 
and d = gcd{n — m,p — 1) , then p — 1 < {n — 1) ■ max{m, d). 

The bounds in the theorems above are not given in term of d only, and 
one can ask whether the prime p can be bounded in term of d only. The 
answer was given by Masuda and Zieve [5J who proved the following. 

Theorem 6. If f{x) = ax^+x'^ permutes ¥p, where n > m > and a G ¥p* . 
Then p-l<{d+ l)d. 

Clearly, Theorem 6 improves Theorem 5 whenever d — 1 < n — 1, which 
is always the case except when m = 1 and {n — 1) \ {p — 1). In section 2, we 
prove the following. 

Theorem 7. If f{x) = ax"'+x"^ permutes ¥p, where n > m > and a G ¥p* . 
Then p -I < {d - l)d. 

Clearly, Theorem 7 implies Theorem 6 and Theorem 5 in all cases. When 
m = 1 and — 1) | we will see in corollary 5 that p—1 < (n— 3), 

which improve Theorem 5. It would be interesting to have a bound for p in 
term oi d = gcd(?T, — m,p — 1) when f{x) = ax^ + x"* permutes and q 
a power of the prime p. In Theorem 9, we will show how in certain cases, 
one can obtain from a permutation binomial f{x) G ¥q[x] a new permutation 
binomial g{x) G Fp[x], and deduce in Corollary 6, a bound of p in term of 
d = gcd(ri — m,p — 1). Some consequences of this theorem are stated in 
sections 2 and 3 

We fix some notation which will be used through this paper. The letter 
p always denotes a prime number, and F^ the finite field containing q = p^ 
elements. For any polynomial g{x) G ¥g[x], we denote by g{x) the unique 
polynomial of degree at most q — 1, with coefficients in F^ such that g{x) = 
g{x) (mod {x'^ — x)). When we refer to a binomial f{x) over F^, we always 
mean a polynomial f{x) G ¥q[x] of the form f{x) = ax" + x™" with the 
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nonrestrictive condition gcd(m, n) = 1 (see [T, Ex. 2. 1]), n > m, and a ^ 0. 
The integer d = gcd(n — m, g — 1) will play an important role. It is well 
known that if —a G {¥*Y , then the equation f{x) = has d + 1 distinct 
solutions in ¥q, hence f{x) is not a permutation of Fq[8]. In particular this 
claim is true if ci = 1. 

2 Non existence of Permutation Binomials of 
Certain Shapes 

An old and stricking result in the theory of permutation polynomials, is the 
following theorem proved by Hermite for the prime fields and Dickson in the 
general case. 

Theorem 8. Let p be a prime number, q = p"^ , and g{x) G Fq[x]. Then g{x) 
is a permutation polynomial if and only if 

(i) g{x) =0 has a unique solution in ¥g. 

(a) For every / G {1, . . . , g — 2}, degg^{x) < q — 2. 

For binomials, we deduce from Theorem [8] the following corollary. 

Corollary 1. Let f{x) = aa;" + G Fg[a;], such that a ^ and (m, n) = 1. 
Let d = gcd(n — m,q — 1). Suppose d > 2. Then f{x) is a permutation 
polynomial of ¥g if and only if 

(i) f{x) = has a unique solution in ¥g. 

(a) For every / G {1, . . . , g — 2} such that d \ I, we have deg f\x) < q — 2. 

Proof. From Theorem [HI we have only to prove that if / G {l,...,g — 2} and 
d\l, then deg f\x) < q — 2. Let k be an integer and let k be the integer in 
{1, . . . , g — 1} such that k = k (mod g — 1). Then 

ri ifA; = 
\ x'' ifk^O 

It follows that if A; > 0, then x^ = x'^~^ (mod x'^ — x) if and only if A; = 
(mod g — 1). Suppose that there exists I G {l,...,g — 2} with d \ I such that 
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deg /'■{x) — q — 1. We deduce from 



(1) 



3=0 

that there exists an integer j G {0, . . . , /} such that 

^{n-m)3+lm ^ ^^^^ _ 

Hence, {n — m)j + Zm > and {n — m)j + Im = (mod q — 1). Since 
d = gcd(n — m,q — 1), then d \ {n — m) and d \ q — 1. But gcd{n, m) — 1 
imphes that gcd{d,m) = 1. Then d \ I which is a contradiction. □ 

Corollary 1 reduces enormously the calculations when applying Theorem 
8 to check whether a given a binomial permutes or not. One needs to 
check the degress of only polynomials instead of g — 2 polynomials as 

given by Theorem 8 (ii). 

For the proof of Theorem 7, we need the following lemma. 

Lemma 1. Let f{x) be a binomial such that d > 1. Let I G {1, . . . ,q — 2} 
such that d \ I. Then the following assertions are equivalent 

(i) 

degf\x)<q-2 (2) 

(ii) 



j=0 

{n—m)j+lm=0 (mod q—l) 



(Hi) 



A=0 

where jo is the smallest integer > satisfying 

—Im q — l —Im n — m q — l 

Jo = r mod — — = — — / — — mod — — 

{n — m) d d d d 
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and 7; is the largest integer A such that 



Jo + X{q - l)/d < I 
Proof. Prom equation 1, deg /'(x) < q — 2 if and only if 



i=o 

(n— m)j+im=0 (mod 



The condition {n—m)j+lm = (mod is equivalent to ^" = 

(mod ^^), which is equivalent to 

(mod — - — ) (bj 



(n — m) d 

Let Jo be the smallest integer satisfying (6). Then j = Jq (mod {q — l)/d). 
Hence, equation (5) is equivalent to 



.Jo + A(^) 



A=0 ^-^^ ' ^ d 

where is the largest integer A such that jo + A (^) < ^. □ 

Proof of Theorem 7. In the following proof, we repetedly use Equation 
(4). The integer jo appearing in this equation depends on I. So, it will be 
denoted by jo{l)- Suppose that there exists a permutation binomial f{x) over 
¥p such that p — 1 > d{d — 1), then {p — l)/d > d — 1, i.e., {p — l)/d > d . 
From Theorem 10, {p—l)/d^ d, then {p — 1) /d > d. Set {p — l)/d = ad — z 
where a > 1 and z are integers such that z G {0, . . . ,d — 1}. By Theorem 
10, we may suppose that z e {1, . . . , d — 1}. Let jo{d) be the unique integer 
determined by (4) for I — d. Set jo{d) — /3d + 5 with S e {0, . . . , d — 1}, then 

jo{d) <{p-l)/d<ad. (7) 

(Case 1): jo{d) < d. 

In this case, because jo{d) + X{p — l)/d > d for A > 1, Equation (4) 
reduces to {jf^^-^) — 0. Since jo{d) < d < p, then {jf^^-^) 7^ 0, which is a 
contradiction, and we can exclude this case. 
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(Case 2): jo{d) > d. 



Clearly, P > 1, and From (7), we deduce that (3 < a. Consider Equa- 
tion (4) for I — ad. We have 

d 

= zj3 + a5 (mod {p — l)/d). 

(Case 2.1): + a5 < {p - l)/d. 

In this case, we have 

d < jo{ad) ^ z/3 + a5 < {p-l)/d< ad^ I. (8) 

Let A be a positive integer, then 

jo{ad) + X{p - l)/d > jo{ad) + (p - l)/d 
= z/3 + a6 + {p - l)/d 

> d + {p-l)/d 

> z + {p-l)/d 
— ad = I. 

Hence there is only one term in the left hand side of equation (4) 
corresponding to / = ad, namely (^-^^^rf)) = C^+tJ- Since ip-l)/d > d, 
we have ad < + d < p. Hence, from (8), we obtain that jo{<^d) — 
z^ + aS < ad < p. Then (j^^^^-^) = (z^+as) ^ ^' ^® reject this case. 

(Case 2.2): zp + aS > {p - l)/d. 

Suppose that (5 = 0, then zl3-\-a5 — zf3 and since ^ < a — 1, we deduce 
that z/3 + aS < {a — l)z < (a — l)(d — 1), hence 

zl3 + a5 <ad — a — d+\ 

< ad — z = {p — l)/d, 
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which is a contradiction. Wc many suppose that 5 is positive. Consider 
Equation (4) for I — {a — l)d. We have 



= {z-d)f3 + {a-l)S (mod (p- 

In order to prove that {z — d)/3 + {a — 1)5 — jo {{a — we have to 
show that < (2; - d)P + {a - 1)6 < (p - l)/d. Since z < d, then 
{z — d)P < 0, hence 

(z - d)p + (a- 1)5 <{a- 1)5 <(a- l){d - 1) 
— ad — d — a + 1 
< ad — z — {p — 1) / d. 

We now look at the sign of {z — d)/3 + {a — 1)5. 

On the one hand side, we have a > /3 > 1, hence a > 2. Furthermore 
since z — d <0 and /3 < a — 1, then {z — d)/3 > {z — d){a — 1), hence 

{z - d)p + {a- 1)5 >{z-d){a-l) + {a- 1)5 
= {a-l){z-d + 5) 
> z-d + 5. 



On the other hand side, since zf3 + a5 > {p — l)/d — ad — z, then 

(z - d)l3 + (a-l)5^z/3 + a5-d/3-5 
> ad — z — df3 — 5 
— {a — f3)d — z — 5 
>d-z-5. 

We have shown that {z—d)P+{a—l)5 > \A\, where A = z—d—6. Hence 
{z-d)/3 + {a-l)5 > and then jo ((a - l)d) = {z-d)/3 + {a-l)5. As 
in the preceding cases we prove that in the left hand side of equation 
(4), for I = {a — l)d. there is only one term. For any integer A > 1, we 
have {z-d)P+{a-l)5+X{p-l)/d > {p-l)/d > I. Equation (4) reads 
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= 0- But, since {z-d)f3 < 0, then {z-d)f3 + {a-l)5 < 
{a — l)d. Hence {(^l^lfa-m)) ^ ^' proof of Theorem 7 is 



Corollary 2. Let f{x) be a permutation binomial over ¥p. Then p — 1 < 

d{d — 2) except possibly in the case d = (mod 3) , p = d'^ — d + 1 and one 
of the two possibilities: n = (mod {p — l)/d) or m = (mod {p — l)/d). 

Proof. Since there is no permutation binomial over F2 and over F3, we may 
suppose that p > 5. From Theorem 7, we have {p — l)/d<d—l. It remains 
to consider the case {p — l)/d = d — 1, i.e. p = d"^ — d + 1. Suppose that 
there exists a permutation binomial over ¥p, f[x) = ax"' + x''" such that 
p — d"^ — d + 1. Consider Equation (4) ior I — d and let jo be the integer 
appearinig in this equation. Since jo ^ {0, . . . , (p — ^)/d}, then jo < d. For 
any positive integer A, we have Jq + X{p — l)/d > Jq + (p — l)/d > d except 
if jo = or jo = 1. Beyond these exceptions, Equation (4) reads (^^J = 0. 
Since jo < d < p this equation is impossible and we get a contradiction. 
(Case jo = 0) 

Equation (4) reads 



hence 1 + d{a)^'^~^'> = (modp). Wc deduce that d'^ = (—1)"' (modp), 
hence (— d)'' = 1 (mod p). We have {—d)'^ = d — 1 (mod p) and {—d)^ = 1 
(mod p), hence the order of —d in Fp which is a divisor of d is equal to 1 or 3. 
Since d{d — 1) = p — 1, the first possibility is excluded, hence d = (mod 3). 
On the other hand side, the condition {n — m)jQ + dm = (mod p — 1) 
implies dm = (mod p — 1), i.e., m = (mod ^^). 
(Case jo = 1) 

Equation (4) reads 



hence d + {aY = (mod p). As in the preceding case we find d'^ = 
(mod p), hence d = (mod 3). On the other hand side, the condition {n — 
^)jo + dm = (mod p — 1) implies {n — m) + dm = (mod p — 1), i.e.. 



complete. 





n = (mod 2=1). 



□ 
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The condition d = (mod 3), p = d'^ — d + 1 in Corollary 4 occurs, for 
instance, for p = 7 and d = 3 oi p = 31 and d = 6 (see jS] Cor. 2. 5]). This 
shows that the bound of p in term of d in Theorem 7 is sharp. 

If f{x) = ax"' + x permutes ¥p, where n > 1, a E ¥p* and (n — l) \ {p— 1), 
then Theorem 6 does not generalize Theorem 5 which implies that p — 1 < 
{n — 1)^. Theorem 7 proved above generalizes Theorem 5 even in this case 
as shown by the following corollary. 

Corollary 3. If f{x) = ax"- +x permutes ¥p, where n > 1 and a G ¥p* , then 
p — 1 < (n — l){n — 3). 

Proof. From Corollary 4, we have p — 1 < d{d — 2), which implies that 
p — 1 < (n — l){n — 3), except if d = (mod 3), 2^ = — 1, and n = Q 
(mod (because m = 1). So we have only to consider the exceptionnel 
case. In this case, we have n = (mod d—1) and n — 1 = (mod d). Clearly 
nj^d-1. It follows that n>2{d- 1). We conclude that 3 < < f + 1. It 
is now easy to deduce the inequality p — 1 < {n — l){n — 3) . □ 

The following result is similar to Corollary 2.4 of [5] except that the four 
polynomials arizing for d = 3 and p = 7 were forgoten. 

Corollary 4. // f{x) = x" + ax™ permutes ¥p, where 1 < m < n < p and 

a e ¥p* , then gcd(n — m,p — 1) > 4 except if d = 3, p = 7 and f{x) is one 

of the followings. 

(i) f{x) = x^ + 3x. 

(a) f{x) = x^ — 3x. 

(Hi) f{x) = x^ + 2x^. 

(iv) f{x) = x^ — 2x^. 

Proof. We conclude from Corollary 4, that if ci = 4, then p — 1 < 8, i.e., 
p < 7. We see from table 7.1 of |1] that there are no permutation binomials 
in this case. When c? = 2, we conclude from Corollary 4, that there are no 
permutation binomials in this case. When d = 3, Corollary 4 implies that 
p = 7. We see from table 7.1 of |1] that the only possible cases are the one 
listed above. □ 
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3 Permutation binomials over a subfield of 
arising from permutation binomials over 

Before stating a result about the possibilty to deduce, in some cases, a per- 
mutation binomial of a subfield of Fg from a given permutation binomial of 
Fg, we make the following definition. 

Definition 1. Fix the integers m and n such that l<m<n<q— 1 and 
let d = gcd{n — m,q — l). We say that the polynomials f{x) = ax^ + x^ and 

g{x) — hx^ -\-x^, with coefficients in ¥q, are d-equivalent and we write f ^ g 
if and only if there exists e e (Fg)'' such that b — ea. 

Obviously the above relation in the set of binomials over F^, of degree at 
most q — I, where the couple {m,n) is fixed, is an equivalence relation and 
that each equivalence class contains {q — l)/d elements. 

Lemma 2. Suppose that the polynomials f{x) — ax"' + x'^ and g{x) = hx^ + 
x^ e Fg[a;]; are d-equivalent and that f{x) permutes ¥q, then so does g{x). 

Proof. Since gcd{n — m,q — l) — d, there exit two integers u and v such that 

u{n — m) + v{q — 1) — d. (9) 

The binomials f{x) and g{x) being d-equivalent, there exists rj & ¥q such 
that b — rj'^a. Using (9), we obtain b — r]'^^"''"^^a. We deduce that 

= 7]-'''"'[a{r]''xf + (r^^a;)™] = v"""'f{v''x)), 
and this proves our lemma. □ 

Theorem 9. Let f{x) = ax"- + be a permutation binomial of¥q with 
q = p^ and s be a positive divisor of r. Let d = gcd{n — m,q — 1). 

( 1) There exists a binomial g{x) = bx"' + G Fps[a;] d-equivalent to f{x) 
if and only if the order of a in (F^)* divides lcm{p^ — 1, (g — i)/d.). 

(2) If these equivalent conditions hold, then the number of g{x) = 6a;" + 
a;™ e Fps[a;], d-equivalent to f{x) is equal to gcd{p^ — 1, (g — l)/(i) 
and they are all distinct as permutations of ¥ps . Moreover, we have 
g{x) = bx"^^ x^^ (mod x^' - x) if p^ - I \ d and g{x) = {b + l)x'^ 
(mod x^" — x) if p^ — l\d where k. mi, Ui are positive integers less than 
p^ — 1, rui ^ Ui, gcd(p* — l,k) = 1. 
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(3) Let t be a posive integer (not necesseraly dividing r). There exists a 
binomial g{x) = 6,x" + x"^ G (Fpt n Fg) [x], d-equivalent to f{x) if and 
only if the order of a in (F^)* divides lcm{p* — 1, (g — ^)/d). 

Proof. (1) Suppose first that the order of a in (F^)* divides lcm{p^ — 1, (g — 
We will use the following claim for which the proof is omited 

Claim 1 Let 6,u,v be positive integers. Then 5 \ lcm{u.v) if and only if 
there exist positive integers 6i, 62 such that 61 \ u, 62 \ v and 6 = lcm{6i, 62). 

Let 5 be the order of a in F*, then 5 — lcm{5i, 82), where 5i and 82 are 
positive integers such that Si \ p'^ — 1 and S2 \ {q — i)/d. Let ^ be a generator 
of F*, then a = (^('?-i)/'5iy(^^(g-i)/i52^i ^qj- gome nonnegative integers i and 
j. Let e = ^-J(9-i)/^2, b = ea and g{x) = 6a;" + x"^. Then e^^-^)/'^ = 

an 51(2;) ~ f{x). 

Conversely, suppose that there exist g{x) — hx^ + e Fps, ^-equivalent 
to /(x), then we may find a (g — l)/(i-th root of unity e such that a — eh. 

Hence a'^'"(f'-i'(«-i)/'^) = (e6)^^^^^^^ = 1, where 5^ = gcd{p'-l, {q-l)/d). 
It follows that the order of a in (Fg)* divides lcm{p^ — 1, (g — 
(2) Let 5s = gcdip'^ — 1, (g — By (1), there exists at least one per- 

mutation binomial of Fg, g[x) = CgX^ + x"^ with Cg € F^s, d-equivalent to 
f{x). Let = bgX'^ + x'^ be any permutation binomial of F^with bg G F^s, 

d-equivalent to f{x), then 51(0;) ~ h{x), hence there exists e G F^)*^ such that 
6, = ecg. We deduce that e = fo^/cs G F^.. It follows that eP'-^ = 1 = e^^"^)/*^ 
and then e'^" = 1. We conclude that has the form h{x) = ecsx'" + x"^ 
with e satsfying the condition e"^^ = 1. On the other hand any polynomial 
h{x) of this form is d-equivalent to g{x) and then to f{x). Clearly all these 
h{x), as permutations of F^, are distinct. Because all of them take different 
values at the argument x — 1, they are distinct as permutations of Wps. We 
conclude that the number of these /I's is equal to Sg. 

To prove the last part of the theorem we reduce g{x) modiilo x/'' — x. 
Denote by g{x) the unique polynomial over Fps of degree at most p''^ — 1 such 
that5f(a;) = g{x) (mod x^^—x). Set n = (p'^ — l)A-|-ni andm = {p'^ — l)fi+mi 
with < mi,ni < p^ — 2. If mi = or ui — 0, then the degree of g{x) is 
equal to — 1, which is excluded by the fact that g{x) is a permutation 
polynomial of ¥ps. If mi = ni, then clearly — 1 | d and g(x) = (6 + l)x'^, 
where k = Ui = mi and gcd(A;,p'* — 1) = 1. Suppose now that mi 7^ 0, ni 7^ 
and mi 7^ ui, then p^ — 1 \ d and g{x) = 6a;"^ + a;™^ Let k = gcd(mi,ni), 
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then the polynomial gi{x) = + is a permutation binomial of ¥ps. 

(3) We will use the following which is certainly well known. 
Claim 2 Let a, b, c be nonzero integers, then 

gcd(lcm{a,b)Jcm(a,c)) = lcm(^a, gcd{b, c)) 

Suppose that there exists a binomial g{x) = fox" + x"^ G (¥pt fi Fg)[a;], 
(i-equivalent to /(x). Let s = gcd{r,t), then fl Fp* = ¥ps and by (1), 
the order of a in F^ divides lcm{p'^ — 1, (g — l)/d). Therefore this order 
divides lcm{p^ — 1, (g — l)/(i). Suppose now that the order of a in Fg divides 
lcm{p^ — l,{q — l)/d), then applying the above Claim with a = {q — l)/d, b = 
p* — 1 and c = p'^ — 1, we conclude that this order divides /cm(p* — 1, {q — l)/d) 
and then by (1) there exists a binomial g{x) = bx"' + G (F^t fl Fg) [x], d- 
equivalent to /(x). 

□ 

Remark 1. Suppose that p is odd, then under the hypothesis (1) of the above 
theorem, we have gcd{d,p'^ — 1) 7^ 1. Indeed if this gcd is equal to 1, then 
lcm{p^ — 1, {q — l)/d) = {q — l)/d. But it is knownn that if {—l/aY'^~^^^'^ = 1, 
then the corresponding binomial is not a permutation binomial of¥q(see JE/)- 

Corollary 5. Let f{x) = ax" + x™ be a permutation binomial of ¥q. Suppose 
that the order of a in ¥* divides lcm{p — l,{q — l)/d). Then p — l< d{d — 1). 

Proof, li p — 1 \ d, the corollary is clear. If not, the proof is a direct conse- 
quence of Theorem 7 and Theorem 9. □ 

Corollary 6. Suppose that there exists a permutation binomial f{x) = ax"' + 
x^ of¥q with q= p^ such that for any prime number, I \ d, we have gcd{l{l — 
l),r) = 1. Then d = p — 1 or there exist a permutation binomial of ¥p, 
gi{x) = cx^i + such that n = kni (mod p — 1), m = krrii (mod p — 1), 
< kmi < krii < p — 1, where k is a positive integer coprime with p — 1, 
and p — 1 < d{d — 1). Moreover the two possibilites exclude each other. 

Proof. Let I be any prime factor of d. We have p^ = 1 (mod Z), by asymption 
and = 1 (mod /), by Fermat's little theorem. Since r and / — 1 are 
coprime, then p = 1 (mod I). It is easy to see that p = 1 (mod d) and 
lcm(p — 1, (g — l)/(i) = g — 1 so that Theorem 9 may be applied to any 
permutation binomial of ¥q. Let g{x) be the permutation binomial of F^ 
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with coefficients in ¥p deduced from /(x), using Theorem 9. Let gi{x) be 
the reduced polynomial of g{x) modulo — x. Then gi{x) is a monomial 
or gi{x) is a sum of 2 monomials of degree n' and m' respectively satisfying 
< m' < n' < p — 1. Moreover the ffist case holds if and only if p — 1 \ d. 
Since p = 1 (mod d) then the first case holds if and only if d = p — 1. To 
complete the proof let k = gcd{m',n'), mi = m'/k and rii = n'/k, and by 
applying Corollary 6, we have p — 1 < d{d — 1). □ 

The following result is a generalization of [5, Corallary 2. 4, Corollary 2. 

5]. 

Corollary 7. There does not exist a permutation binomial ofFg with q = p^ 
if one of the following conditions holds. 

(i) r odd, d = 2, p 3. 

(a) r odd, d = 4, p ^ 5. 

(Hi) gcd{r, 6) = l,d = 3,pj^7. 

(iv) gcd{r, 10) = 1, c? = 5 p 7^ 11. 

(v) gcd{r, 6) = 1, d = 6, p ^ 7, 13, 19, 31. 

(vi) gcd{r, 42) = 1, d = 7, p^ 29. 

(vii) r odd, d = 8, p 17. 

Proof. We prove the case [v) using corollaries 6 and 8 and [5^, Corollary 2. 
5]. The proof of the other statements will be omitted. Suppose that there 
exist a permutation binomial of Fg with d = 6 and gcd(r, 6) = 1, then the 
hypotheses of the above corollary holds. We deduce that p = d + 1 = 7 
or there exists some permutation binomial gi{x) = cx"'^ + x™^ of ¥p. It is 
evident that gcd(?2i —mi,p — l) divides d = 6 and is not trivial. The possible 
values of this gcd are 2 or 3 or 6. According to [5, Corollary 2. 5], the 
possible values of p are p = 7, 13, 19, 31. □ 

Remark 2. It is of interest to improve the conditions on r andp in the above 
corollary. We use the results of 14, Table 7.1] to make some observations in 
this direction. Since ax^ + x is a permutation polynomial of ¥q for q = 
(mod 3) and —a not a square, then the condition p ^ 3 is necessary for 
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d — 2. The polynomial ax^ + x is a permutation of¥q for q = (mod 5) and 
—a is not fourth power, hence the condition p ^ 5 is necessary for d = 4. 
Let a G Fg such that = —1, then ax^ + x permutes ¥g, hence the condition 
r odd is necessary for d = 4. 

Proposition 1. Le q = p^ and f{x) = ax"- + x"^ G ¥g[x] be a permutation bi- 
nomial. Let Fpn , • • • , Fps„ be subfields of¥q such that for each i, ¥pSi contains 
the coefficients of some binomial gi{x), d- equivalent to f{x), then n^^^Fps^ 
contains the coefficients of some binomial g{x), d-equivalent to f{x). 

Proof. We prove the result for m = 2. The proposition may be completed 
easily by induction. By Theorem 9, (1), the order of a divides both lcm{p^^ — 
1, {q — l)/d) and lcm{p^^ — 1, (g — hence by Claim 2, this order divides 

/cm((g— l)/(i, gcd{p'^^ — 1 , p'^^ — 1)) . It is well known that gcd{p^^ — 1, p^^ — 1) = 
pgcd{sus2) _ I g^j^j ^i^^^ Yps^ n ¥pS2 = Fp5cd(.i,s2). By Theorem 9 again this last 
field contains the coefficients of some binomial g{x), d-equivalent to f{x). 

□ 

If we consider all the subfields ¥ps, of F^ satisfying the given property 
in the preceding proposition we may conclude that the field Fq = n^FpSi 
contains the coefficients of some binomial g{x), d-equivalent to f{x). We call 
this field the smallest field containing the coefficients of some d-equivalent to 

fix)- 

The next proposition shows that binomials that are conjugate over F^ or 
in the same d-class have the same smallest field. 

Proposition 2. Let f{x) = ax"'+x"'' G ¥q[x] be a permutation binomial of¥q 
and let Fq be the smallest field containing the coefficients of some d-equivalent 
to fix). 

(1) Let g{x) G ¥q[x]. If f ^ g, then Fq is the smallest field containing the 
coefficients of some d-equivalent to g{x). 

(2) Let f{x) — a^^x^ -\- x^, then Fq is the smallest field containing the 
coefficients of some d-equivalent to f{x). 

Proof. (1) Let Fi be the smallest field corresponding to g{x). For the proof 
of (1) and by symmetry it is sufficient to prove that Fq <Z Fi. Let gi{x) be a 

d-equivalent of g{x) with coefficients in Fi, the (^i ~ (? ~ /, hence Fi contains 
the coefficients of some d-equivalent to f{x). Therefore Fq C Fi. 
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(2) The result follows from Theorem 9, (1) and the observation that a 
and a^" have the same order. 

□ 
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